Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1311:

  Refer to the exhibit.

  

  What are two results of the NAT configuration? (Choose two.)

  A. Packets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2. respectively.
  B. A packet that is sent to 200.1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1.
  C. R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts.
  D. R1 processes packets entering E0/0 and S0/0 by examining the source IP address.
  E. R1 is performing NAT for inside addresses and outside address.
  B. A packet that is sent to 200.1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1.
  C. R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts.

• Question 1312:

  Which Quality of Service (QoS) mechanism allows the network administrator to control the maximum rate of traffic received or sent on a given interface?

  A. Policing
  B. Marking
  C. Queueing
  D. Classification
  A. Policing

  ---

  Explanation

  Traffic Policing

  In general, traffic policing allows you to control the maximum rate of traffic sent or received on an interface and to partition a network into multiple priority levels or class of service (CoS).

• Question 1313:

  Refer to the exhibit.

  Which python code parses the response and prints "18:32:21.474 UTC sun Mar 10 2019?

  

  A. print(response['resut'][0||'simple_time']}
  B. print(response[result']['body']['simple_time']}
  C. print(response['body']['simple_time']}
  D. print(response[jresult']['body']['simple_time']}
  B. print(response[result']['body']['simple_time']}

  ---

  Explanation

  response['result']['body']['simple_time']

  {

  "jsonrpc": "2.0",

  "result": {

  "body": {

  "simple_time": "17:53:49.435 UTC Tue Nov 22 2022\n",

  "time_source": "NTP"

  }

  },

  "id": 1

  }

• Question 1314:

  Which authorization framework gives third-party applications limited access to HTTP services?

  A. iPsec
  B. Basic Auth
  C. GRE
  D. OAuth 2.0
  D. OAuth 2.0

  ---

  Explanation

  https://auth0.com/docs/authenticate/protocols/oauth

  "The OAuth 2.0 authorization framework is a protocol that allows a user to grant a third-party web site or application access to the user's protected resources, without necessarily revealing their long-term credentials or even their identity."

  https://auth0.com/intro-to-iam/what-is-oauth-2

  "...is a standard designed to allow a website or application to access resources hosted by other web apps on behalf of a user."

• Question 1315:

  Which network devices secure API platform?

  A. next-generation intrusion detection systems
  B. Layer 3 transit network devices
  C. content switches
  D. web application firewalls
  D. web application firewalls

• Question 1316:

  When the "deny" statement is used within a route map that is used for policy-based routing how is the traffic that matches the deny route-map line treated?

  A. Traffic is routed to the null 0 interface of the router and discarded.
  B. Traffic is returned to the normal forwarding behavior of the router.
  C. An additional sequential route-map line is needed to divert the traffic to the router's normal forwarding behavior.
  D. An additional sequential route-map line is needed to policy route this irafic.
  B. Traffic is returned to the normal forwarding behavior of the router.

• Question 1317:

  Which TLV value must be added to Option 43 when DHCP is used to ensure that APs join the WLC?

  A. 0x77
  B. AAA
  C. 0xf1
  D. 642
  C. 0xf1

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/97066-dhcp-option-43-00.html

• Question 1318:

  Please select the correct option that shows the correct combination for the Type 1 Hypervisor.

  A. Hardware; Hypervisor; Guest OS
  B. Hardware; Host OS; Hypervisor; Guest OS
  C. Host OS; Hypervisor; Guest OS
  D. Hardware; Host OS; Guest OS
  A. Hardware; Hypervisor; Guest OS

• Question 1319:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks:

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Sw10

  Config t

  no int po1

  default int ran et0/0-2

  int ran e0/0-2 switchport trunk encap dot1q

  switchport mode trunk

  channel-group 1 mode active

  no shut

  

  

• Question 1320:

  Which LISP device is responsible for publishing EID-to-RLOC mappings for a site?

  A. ETR
  B. MS
  C. ITR
  D. MR
  A. ETR

  ---

  Explanation

  An Egress Tunnel Router (ETR) connects a site to the LISP-capable part of a core network (such as the Internet), publishes EID-to-RLOC mappings for the site, responds to Map-Request messages, and decapsulates and delivers LISP-encapsulated user data to end systems at the site.

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe-3s/irl-xe-3s-book/irl-overview.html

  https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/locator-id-separation-protocol-lisp/white_paper_c11-652502.html